Skip to content
OpenAdvisories
Medium WID-SEC-2022-2412 1 CVE

ESRI ArcGIS: Schwachstelle ermöglicht Offenlegung von Informationen

Published Dec 28, 2022 · Updated Dec 28, 2022 · de-DE

Vendor: Esri Product: ArcGIS Product: ArcGIS 10.7.1 Product: ArcGIS 10.8.1 Product: ArcGIS 10.9.0 Product: ArcGIS 10.9.1 Product: ArcGIS 11 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ESRI ArcGIS ausnutzen, um Informationen offenzulegen.

Product

ArcGIS ist ein Geoinformationssystem.

Vulnerabilities 1

  • High 7.5
    CVE-2022-38202

    BUG-000152121 - Directory traversal vulnerability in ArcGIS Server.

    There is a path traversal vulnerability in Esri ArcGIS Server versions 10.9.1 and below. Successful exploitation may allow a remote, unauthenticated attacker traverse the file system to access files outside of the intended directory on ArcGIS Server. This cou…

    Esri ArcGIS Server

Revision history

  1. #1

    Initiale Fassung

References